CVE-2002-2260

Mozilla Bugzilla 2.10-2.17 - Cross-Site Scripting via Quips Feature

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page.

References (5)

Core 5
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103837886416560&w=2
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2002/dsa-218
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6257
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10707

Scores

EPSS 0.0109
EPSS Percentile 61.7%

Details

CWE
CWE-79
Status published
Products (27)
mozilla/bugzilla 2.10
mozilla/bugzilla 2.12
mozilla/bugzilla 2.14
mozilla/bugzilla 2.14.1
mozilla/bugzilla 2.14.2
mozilla/bugzilla 2.14.3
mozilla/bugzilla 2.14.4
mozilla/bugzilla 2.14.5
mozilla/bugzilla 2.16 (2 CPE variants)
mozilla/bugzilla 2.16.1
... and 17 more
Published Dec 31, 2002
Tracked Since Feb 18, 2026